CVE-2012-5419: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA software 8.7.1 and 8.7.1.1 for the Cisco ASA 1000V Cloud Firewall allows remote attackers to cause a denial of service device reload via a malformed H.225 H.323 IPv4 packet, aka Bug IDs CSCuc42812 and CSCuc88741...

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

CVE-2012-5991: Undefined Security Weakness

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...

PT-2012-6218

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller Software version 7.2.110.0 Description The issue allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauth type request. It is due to...

PT-2012-1095

Name of the Vulnerable Software and Affected Versions libproxy versions 0.2.x through 0.3.x libproxy-kde version 0.3.0 libproxy-mozjs version 0.3.0 libproxy-python version 0.3.0 libproxy-gnome version 0.3.0 libproxy-webkit version 0.3.0 libproxy-debuginfo version 0.3.0 libproxy-bin version 0.3.0...

CVE-2012-4643

The DHCP server on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 before 7.25.8, 7.1 before 7.25.8, 7.2 before 7.25.8, 8.0 before 8.05.28, 8.1 before 8.12.56, 8.2 before 8.25.27, 8.3 before...

CVE-2012-4660

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

CVE-2012-4660

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

CVE-2012-4663: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

CVE-2012-4660: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

CVE-2012-4662: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

CVE-2012-4659: Improper Authentication

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.30 and 8.3 before 8.32.34 allows remote attackers to cause a denial of...

PT-2012-5529 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 before 8.25.30 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 before 8.32.34 ASA Services Module ASASM in Cisco Catalyst 6500 series devices...

PT-2012-5533 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 before 8.32.25 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 before 8.42.5 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...

PT-2012-5531 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 through 8.32.33 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 through 8.44.3 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

PT-2012-5530 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.25.16 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 through 8.32.27 Cisco Adaptive Security Appliances ASA 5500 series devices version...

Session-timeout not being respected

As per the following KB I made changes that should have seen timeout reduced to 2 minutes. https://confluence.atlassian.com/pages/viewpage.action?pageId=126910597 in /confluence/WEB-INF/web.xml code 2 code I can't force Confluence to have a session timeout. This issue has been reproduced on first...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20120926-sip)

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause an affected device to reload. Affected devices must be configured to process SIP messages and for pass-through...

Cisco IOS Software DHCP Denial of Service Vulnerability (cisco-sa-20120926-dhcp)

Cisco IOS Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by sending a single DHCP packet to or through an affected device, causing the device to reload. Cisco has...

CVE-2012-4623

The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO, 3.3.xS, and 3.3.xSG before 3.3.1SG allows remote attackers to cause a denial of service device reload via a malformed...